IntelPython / dpnp / 33659689320

78%

push

github

ci: add zizmor security scanning for GitHub Actions workflows (#3053)

Adds a CI job that runs the [zizmor](https://docs.zizmor.sh) static
analyzer over the workflow files under `.github/`.

`zizmor` audits GitHub Actions workflows for supply-chain and
privilege-escalation weaknesses — unpinned action references, credential
persistence through the checkout token, template injection via `${{ ...
}}` expansion in `run:` blocks, and overly broad `GITHUB_TOKEN`
permissions.

This is a CI/configuration-only change; no library code, tests, or
documentation are affected.

1546 of 2898 branches covered (53.35%)

Branch coverage included in aggregate %.

26626 of 32996 relevant lines covered (80.69%)

8636.98 hits per line